Fallagassrini Bypass Shell

<?
session_start();
error_reporting(E_ALL);
ini_set('display_errors','On');
require_once 'administration/panel/mangopay/vendor/autoload.php';
$MangopayApi = new \MangoPay\MangoPayApi();
$MangopayApi->Config->ClientId = 'ofyc2017';
$MangopayApi->Config->ClientPassword = 'iqkhQK591cWzu3Ept5Z4niNiaCaw8Ctpa9ixa68ZvXrP9BEpbJ';
$MangopayApi->Config->TemporaryFolder = 'temp_sandbox';
$MangopayApi->Config->BaseUrl = 'https://api.sandbox.mangopay.com';



//ERROR CODE : https://docs.mangopay.com/guide/errors
//CB DE TEST : https://docs.mangopay.com/guide/testing-payments
//3569990000000157
//1018
//123

$stepId=1;
$stepId					=		$_REQUEST['stepId'];

if ($stepId==2)
	{
	$preAuthorizationId		=		$_REQUEST['preAuthorizationId'];
	$pre = $MangopayApi->CardPreAuthorizations->Get($preAuthorizationId);
	if ($pre->Status=="SUCCEEDED" && $pre->PaymentStatus=="WAITING") {echo "OK ... preAuthorizationId : ".$preAuthorizationId;}
	else {echo "erreur";}
	}
else
	{
	if ($_SESSION['secure']) {echo "<a href='".$_SESSION['secure']."'>3DS</a>";exit;}
	$stepId=1;
	$user_id = "22214901";

	$cardRegister = $MangopayApi->CardRegistrations->Get($_SESSION['cart_id']);
	$cardRegister->RegistrationData = isset($_GET['data']) ? 'data=' . $_GET['data'] : 'errorCode=' . $_GET['errorCode'];
	$updatedCardRegister = $MangopayApi->CardRegistrations->Update($cardRegister);
	$cart_id = $updatedCardRegister->CardId;
	echo "<pre>";print_r ($updatedCardRegister);echo "<pre>";
	if ($updatedCardRegister->Status=="VALIDATED")
	
		{

		echo "User ID :". $user_id."<br>";
		echo "Card ID :". $cart_id."<br>";
		$CardPreAuthorization = new \MangoPay\CardPreAuthorization();
		$CardPreAuthorization->AuthorId = $user_id;
		$CardPreAuthorization->DebitedFunds = new \MangoPay\Money();
		$CardPreAuthorization->DebitedFunds->Currency = "EUR";
		$CardPreAuthorization->DebitedFunds->Amount = $_SESSION['montant'];
		$CardPreAuthorization->SecureMode = "DEFAULT";
		$CardPreAuthorization->CardId = $cart_id;
		$CardPreAuthorization->SecureModeReturnURL = "http".(isset($_SERVER['HTTPS']) ? "s" : null)."://".$_SERVER["HTTP_HOST"].$_SERVER["SCRIPT_NAME"]."?stepId=".($stepId+1);
		$result = $MangopayApi->CardPreAuthorizations->Create($CardPreAuthorization);
		echo " CardPreAuthorization  ID:". $result->Id."<br>";
		echo "<pre>";print_r ($result);echo "<pre>";
		
		echo "<a href='".$result->SecureModeRedirectURL."'>3DS</a>";
		$_SESSION['secure'] = $result->SecureModeRedirectURL;
	
		}
	else
	
		{
		echo "Erreur";
		}
	}

	?>